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NON-VOLATILE MEMORY FOR 
USE WITH AN ENCRYPTION DEVICE 

BACKGROUND OF THE INVENTION 
1* Field of the Invention 

The present invention relates generally to a non- 
volatile memory interface for use with an encryption device. 
More particularly, the present invention relates a Non- 
Volatile memory circuit connected to an encryption device 
for storing the crypto key and the key loader for the 
encryption device. 

2. Description of the Prior Art 

The encryption device used for encrypting data to be 
transmitted to a ground station via a missile's telemetry 
system requires a crypto key to be loaded in the encryption 
device to permit the encryption of the data. The standard 
key loaders used by the military for crypto key loading are 
the KOI-18 and the KYK-13. The KOI-18 is a paper type 
reader that serially outputs the crypto key data and clock 
as a series of electrical pulses. The KYK-13 is an 
electrical device that can store up to three crypto keys 
with their corresponding check word. The KYK-13 outputs 
data in a manner which is similar to the KOI-18. 

The missile's telemetry system encryption device 
includes a Non-Volatile Memory circuit which receives the 
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crypto key and check word from the key loader. Upon 
receiving the crypto key and check word the Non-Volatile 
Memory circuit will load the encryption device with the 
crypto key and also display the status of a load. When 
power is removed from the encryption device, only the Non- 
Volatile Memory circuit will retain the key data including 
the crypto key. When power is re-applied to the encryption 
system, the Non-Volatile Memory circuit automatically 
reloads the encryption device with the key data. The crypto 
key will remain in the Non-Volatile Memory circuit until the 
the key is erased from the circuit. 

While the Non-Volatile Memory circuit used in the past 
perform their intended function of key data storage 
adequately, these circuits generally require substantially 
more space than is currently available on today's state of 
the art missile encryption systems. There is now a need to 
significantly reduce the size of Non-Volatile Memory circuit 
used with a missile's telemetry system encryption 
device . 

SUMMARY OF THE INVENTION 
The present invention overcomes some of the 
difficulties of the prior art including those mentioned 
above in that it comprises a relatively simple in design yet 
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highly effective Non-Volatile Memory circuit for use with a 
missile's telemetry encryption system. 

The present invention comprises a Non-Volatile Memory 
circuit which functions as an interface between a key loader 
and an encryption device. Included in the Non-Volatile 
Memory circuit is a Flash/ EEPROM 8-bit Microcontroller which 
has an EEPROM suitable for storage of a crypto key and its 
corresponding checkword and also a backup crypto key and 
checkword. Connected to the microcontroller is a 4 MHz 
clock signal generator which supplies the master clock 
signal to the microcontroller. A pair of light emitting 
diodes are also connected to the micrcontroller to indicate 
the status of a load of the crypto key and checkword within 
the microcontroller as well as the status of an erase of the 
crypto key and checkword from the microcontroller. The 
microcontroller is also connected to the telemeter 
transmitter for the missile. This allows the micrcontroller 
to turn off the transmitter during a key load which prevents 
transmission of the crypto key and its corresponding 
checkword. 

When the microcontroller completes a load of the crypto 
key from its internal EEPROM to the encryption device and 
upon launch of the missile, the software within the 
microcontroller erases the crypto key and its corresponding 
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checkword from its EEPROM . This prevents an enemy force 
from retrieving the crypto key and its corresponding 
checkword from the missile after launch. The 
microcontroller can also erase the crypto key and its 
corresponding checkword from its EEPROM upon receiving an 
active erase signal from the missile. 

BRIEF DESCRIPTION OF THE DRAWINGS 

FIG. 1 is a block diagram illustrating a missile's 
telemetry encryption system and external key loader; 

FIG. 2 is a detailed electrical diagram of the Non- 
Volatile Memory circuit of FIG. 1 which comprises the 
present invention; 

FIGS. 3A-3C illustrate timing and data waveforms 
associated with a data transfer between the key loader and 
the Non -Volatile Memory circuit of FIG. 1; and 

FIGS. 4-9 depicts a flow chart for the software used by 
the 8 -bit microcontroller of FIG. 2 to load a crypto key 
with its corresponding check word into the encryption device 
of FIG. 1. 

DETAILED DESCRIPTION OF THE PREFERRED EMBODIMENT 
Referring to FIGS. 1 and 2, there is shown a missile's 
telemetry encryption system which includes a key loader 22 

4 
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for loading a crypto key with its corresponding check word 
into a Non-Volatile Memory circuit 20. The key loader 22 
may be either be a KOI-18 and a KYK-13 key loader. It 
should be noted that the KYK-13 key loader can store three 
crypto keys with their corresponding check words. 

Non-Volatile Memory circuit 20 is connected to a KVG-68 
encryption device 24 which allows Non-Volatile Memory 
circuit 20 to load a crypto key with its corresponding check 
word into the encryption device 24. The encryption device 
is connected to a telemeter transmitter 26 which transmits 
encrypted telemetry data from an encryption device 24 to a 
ground station. 

As shown in FIG. 2, Non-Volatile Memory circuit 20 
includes an 18-pin F lash / EEPROM 8-bit Microcontroller 32 
which stores the crypto key and corresponding check word 
used by encryption device 24. The 18-pin Flash/ EEPROM 8- 
bit microcontroller 32 used in the preferred embodiment of 
the present invention is a Model PIC16F84 commercially 
available from Microchip Technology Inc. of Phoenix, 
Arizona. Connected to microcontroller 32 is a 4 MHz clock 
signal generator 34 which supplies the master clock signal 
to microcontroller 32. 

Referring to FIGS. 1, 2 and 4, a power up circuit 
comprising a pair of resistors R10 and Rll, a diode D2 and a 
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capacitor CI. When power is first applied to 
microcontroller 32 upon powering up Non-Volatile Memory 
circuit 20 a logic zero is supplied to the /MCLR input of 
microcontroller 32 clearing microcontroller 32. This logic 
zero then transitions to a logic one which results in 
microcontroller 32 executing the main routine (FIG. 4) of the 
computer software of Appendix A. 

The main routine begins at program step 40, proceeding 
to program step 42 which is the initialize_system routine 
illustrated in FIG. 5 and also included in the nvmem.c 
module of the software of Appendix A. The initialize 
system routine sets all of the port output signals of 
microprocessor 32 to their initial condition (program step 
60) ; initializes the interrupts for microprocessor 32 
(program step 62) and initializes the test indicators LEDS 
36 and 38 (program step 64). During program step 66 the 
EEPROM of microprocessor 32 is scanned to determined if a 
valid crypto key was previously loaded into the EEPROM of 
microprocessor 32. If a valid key is detected an internal 
flag is set which allows for a load of the key into 
encryption device 24 by the software of Appendix A. 

During initialization the /VAR_REQ output from 
microprocessor 32 is set high since this signal is active 
low signal. 
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At this time it should be noted that the software of 
Appendix A is adapted for processing two KGV-68 although 
only one is illustrated in FIG. 1. In a security upgrade 
configuration the software operates in a manner which allows 
two KGV-68 encryption units to be loaded with a crypto key 
and its corresponding check word. It should be noted that 
while FIG. 1 only shows one KVG-68, the non-volatile memory 
comprising the present invention may be easily modified to 
accommodate to KVG-68 encryption units. 

After initialization the ERASE output from 
microprocessor 32 is set high since this signal is an active 
low signal which turns off LED 38. After initialization the 
STATUS output from microprocessor 32 is also set high since 
this signal is an active low signal which turns off LED 36. 
During initialization of microcontroller 32 the ERASE output 
and STATUS output from microprocessor 32 are pulsed to test 
the operation of LEDS 36 and 38. Setting the ERASE output 
of microprocessor 32 high indicates that the crypto key has 
not been erased from microprocessor 32. Setting the STATUS 
output of microprocessor 32 high indicates that encryption 
device 24 is not loaded. 

The XMTR_D I SABLE output from microprocessor 32 is set 
high during initialization to disable transmitter 26. 
The ENCR_S EN S E_I N output from microprocessor 32 is set low 
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during initialization indicating that the KVG-68 encryption 
device 24 is not being loaded. The ENCRJFCLK and ENCR_FDATA 
outputs from microprocessor 32 are set high during 
initialization. The clock signal provided by 
microcontroller 32 at the ENCR_FCLK output from 
micrcontroller 32 has an active falling edge necessitating 
that the signal be set high during initialization of 
micrcontroller 32. Setting the ENCR_FDATA output from 
microprocessor 32 high results in "0" at the ENCR_FDATA 
output of microprocessor 32. 

Referring to FIGS. 1, 2, 4 and 6, during program step 
44, the software of Appendix A test for the presence of key 
loader 22. The SENSE_IN line is monitored by 
microcontroller 32 to determine the presence of key loader 
22. When the SENSE_IN line is high resulting in a "1" at 
the RAO input of microcontroller 32, the software of 
Appendix A proceeds to the eeprom_key_load routine of FIG. 
6. 

During program step 70 transmitter 26 is disabled by 
micrcontroller 32 to prevent possible transmission of the 
crypto key. During program step 72 the /VAR_REQ output from 
microprocessor 32 is set low to request the checkword from 
key loader 22. During program step 74 the checkword is 
loaded into the EEPROM of microcontroller 32. Program step 
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78 waits for indication that the key will be transferred 
from key loader 22 to the EEPROM of microcontroller 32 with 
the key being loaded into the EEPROM of micrcontroller 32 
during program step 82. Micrcontroller 32 and the software 
of Appendix A also duplicate the key and checkword in a 
backup location in the EEPROM of micrcontroller 32. 

During program step 84 an indication is provided that 
the key is present by clearing the ERASE LED 36 turning off 
the ERASE LED 36. During program step 86, transmitter 26 is 
enabled by microcontroller 32. During program step 46, the 
software of Appendix A returns to the main program of FIG. 
4. 

During program step 48, the software of Appendix A 
checks for the presence of the key. If the key is not 
present, i.e. the key is not accurately read into 
microcontroller 32, the software returns to program step 44 
to determine if the key loader 22 is present. When key 
loader 22 is present, the software of Appendix A will again 
load the key. 

When the key is correctly loaded into micrcontroller 
32, the software of Appendix A proceeds to program step 50 
which is the KGV load attempt decision. When a decision is 
made to load encryption unit 24, the software of Appendix A 
proceeds to the routine kgv_key_load of FIG. 7 (program step 

9 
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52) . During program step 90, transmitter 26 is disabled. 
During program step 92 the KGV sense input ( ENCR_S ENS E_IN ) 
is set active, i.e. the logic "one" state, to start a load 
of the crypto key with its corresponding check word. 
Encryption unit 24 then responses with an active low 
variable request signal ( / ENCR_VAR_RQ ) to microcontroller 32 
(program step 94) . During program step 96, there is a set 
up for the start of the key load interrupt within 
microcontroller 32. During program step 98 an internal 
timer within microcontroller 32 is initialized and the key 
load interrupt is enabled for the key loading process. 

During program step 100 there is an indication within 
micrcontroller 32 that the key should be present. During 
program step 102 a wait routine occurs which allows for 
completion of the key load process. When the key load 
process is complete, which is an internal indication from 
the interrupt routine, the KGV sense input (ENCR_SENSE_IN) 
is set inactive, i.e. a logic "zero" state (program step 
104) . 

During program step 106, the software of Appendix A 
increments the count to keep track of the key load attempts. 
During program step 108 the software of Appendix A sets a 
flag to use the backup key on the next attempt. A second 
crypto key with its corresponding check word are stored in 
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the EEPROM of microcomputer 32. This backup key is utilized 
in the event that the primary key is not functional. 

During program step 110, the software of Appendix A 
determines whether the key is loaded by testing random 
compare input ( / ENCR_RAN_CP ) to microcomputer 32. The 
answer will be no since there is a requirement that the 
routine kgv_key_load of FIG. 7 be processed twice to load 
the crypto key and the checkword into encryption device 24. 

At this time it should be noted that the checkword is 
loaded first followed by the crypto key. During program 
step 112 the software of Appendix A determines whether there 
has been more than three attempts to load the checkword and 
the crypto key, which equates to six loops of the routine 
kgvJcey_load of FIG. 7. If the answer is "yes" then 
transmitter 26 is enabled during program step 114. When this 
occurs the light emitting diode 36 will blink (program step 
116) to indicate that microcontroller 32 has been 
unsuccessful in its attempt to load encryption device 24. 

When a load of encryption device 24 is successful 
light emitting diode 3 6 remains on (program step 116) . 
Program step 118 the software of Appendix A sets an internal 
flag indicating that a key load has been attempted. This 
prevents an inadvertent return to the routine kgv_key_load 
of FIG. 7. 
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The software of Appendix A next returns to main routine 
of FIG. 4. During program step 54, a determination is made 
as to whether or not the key should be erased. When the 
ERASE input to micrcontroller 32 is high (RA4 input to 
microcontroller 32) r the microcontroller 32 erases the 
checkword and the crypto key as well as its backup from the 
EEPROM within microcontroller 32. Five random writes are 
performed within the EEPROM within microcontroller 32. This 
logic one signal, i.e. ERASE signal is provided by the 
loader interface 28 or the missile interface 30 to the RA4 
input of micrcontroller 32. The signal provided by the 
missile interface 30 is substantially higher than the 
digital logic levels necessitating the use of additional 
resistor R9 in the LAUNCH line connecting missile interface 
30 to microcontroller 32. 

Referring to FIG. 8, the routine for erasing the EEPROM 
within microcontroller 32 is erase_key. Program step 120 
debounces the erase indication signal provided to the RA4 
input to microcontroller 32. Whenever the signal provided 
to the RA4 input to microcontroller 32 is a logic "one", the 
software of Appendix A proceeds to program step 124 erasing 
the crypto key with its corresponding check word from the 
EEPROM within microcontroller 32. The erase light, i.e. 
light emitting diode 38 is set, and the load status is 
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displayed during program step 124. 

From the foregoing, it may readily be seen that the 
present invention comprises a new, unique and exceedingly 
causeway mooring apparatus for use in non-volatile memory 
for use with an encryption device which constitutes a 
considerable improvement over the known prior art. Many 
modifications and variations of the present invention are 
possible in light of the above teachings. It is to be 
understood that within the scope of the appended claims the 
invention may be practiced otherwise than as specifically 
described. 
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What is claimed is: 



1 1. An apparatus for providing a crypto key and an 

2 associated checkword of said crypto key to an encryption 

3 device for a telemeter system of a missile, said apparatus 

4 comprising: 

5 loading means for generating said crypto key and said 

6 associated checkword; 

7^ control means connected to said loading means to 
63 receive said crypto key and said associated 

S3 checkword from said loading means, said control 

lffi means sending a first logic signal to said loading 

1§] means to effect a transfer of said crypto key and 

ijjh said associated checkword from said loading means 

lgf to said control means for storage within said 

lfi control means; 

lP said control means being connected to said encryption 

16 device, said control means sending a second logic 

17 signal to said encryption device to initiate a 

18 load of said crypto key and said associated 

19 checkword into said encryption device; 

20 said control means receiving from said encryption 

21 device a third logic signal, said control means, 

22 responsive to said third logic signal, loading 

23 said crypto key and said associated checkword into 
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24 said encryption device; 

25 said control means being connected to a transmitter 

26 for the telemeter system of said missile, said 

27 control means providing a fourth logic signal to 

28 said transmitter to disable said transmitter when 

29 said crypto key and said associated checkword are 

30 loaded into said encryption device preventing said 

31 crypto key and said associated checkword from 
33 being transmitted by said transmitter; and 

33 said control means being connected to a missile 

I§ interface within said missile to receive a fifth 

|5 logic signal from said missile interface upon a 

|j> launch of said missile, said control means, 

|2 responsive to said fifth logic signal, erasing 

3]f said crypto key and said associated checkword from 

i4 said control means. 

1 2. The apparertus of claim 1 wherein said control means 

2 comprises an 8-bit Microcontroller. 

1 3 . The apparcLtus of claim 1 wherein said control means 

2 includes an EEPROM for storing said crypto key and said 

3 associated checkword and a copy of said crypto key and said 

4 associated checkword. 
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1 4. The apparatus of claim 1 further comprising a 

2 light emitting diode connected to said control means, said 

3 light emitting diode displaying a status for a load of said 

4 crypto key and said associated checkword into said 

5 encryption device. 

^ 5. The apparatus of claim 1 further comprising a light 

20 emitting diode connected to said control means, said light 

S3 emitting diode displaying a status for an erase of said 

*ti crypto key and said associated checkword from said 

Eg microcontroller . 

6. An apparatus for providing a crypto key and an 

lj associated checkword of said crypto key to an encryption 

P device for a telemeter system of a missile, said apparatus 

4 comprising: 

5 a key loader having said crypto key and said associated 

6 checkword stored therein; 

7 a microcontroller connected to said key loader to 

8 receive said crypto key and said associated 

9 checkword from said key loader, said 

10 microcontroller sending a first variable request 

11 signal to said key loader to effect a transfer of 



16 



Navy Case No. 82,100 



12 said crypto key and said associated checkword from 

13 said key loader to said microcontroller for 

14 storage within said microcontroller; 

15 said microcontroller being connected to said encryption 

16 device, Sciid microcontroller sending a sense in 

17 signal to said encryption device to initiate a 

18 load of said crypto key and said associated 
19^ checkword into said encryption device; 

2® said microcontroller receiving from said encryption 

2D device a second variable request signal, said 

2B5 microcontroller, responsive to said second 

2§g variable request, loading said crypto key and said 

24=; associated checkword into said encryption device; 

2j|{ said microcontroller being connected to a transmitter 

2¥ for the telemeter system of said missile, said 

28 microcontroller providing a transmitter disable 

29 signal to said transmitter to disable said 

30 transmitter when said crypto key and said 

31 associated checkword are loaded into said 

32 encryption device preventing said crypto key and 
3 3 said associated checkword from being transmitted 
34 by said transmitter. 
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1 7. The apparatus of claim 6 wherein said 

2 microcontroller comprises an 8-bit Microcontroller. 

1 8. The apparatus of claim 6 wherein said 

2 microcontroller includes an EEPROM for storing said crypto 

3 key and said associated checkword and a copy of said crypto 

4 key and said associated checkword. 

A 9. The apparatus of claim 6 further comprising a 

% light emitting diode connected to said microcontroller, said 

Nf light emitting diode displaying a status for a load of said 

W crypto key and said associated checkword into said 

□ encryption device. 

§JL 10. The apparatus of claim 6 wherein said 

r§ microcontroller is connected to a missile interface within 

"3 said missile to receive a launch signal from said missile 

4 interface upon a launch of said missile, said 

5 microcontroller, responsive to said launch signal, erasing 

6 said crypto key and said associated checkword from said 

7 microcontroller . 

1 11. The apparatus of claim 10 further comprising a 

2 light emitting diode connected to said microcontroller, said 
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3 light emitting diode displaying a status for an erase of 

4 said crypto key and said associated checkword from said 

5 microcontroller . 

1 12. The apparatus of claim 6 wherein said 

2 microcontroller is connected to a loader interface within 

3 said missile to receive an erase signal from said loader 

4 interface, said microcontroller, responsive to said erase 
f§ signal, erasing said crypto key and said associated 

111 checkword from said microcontroller. 

ft 13. An apparatus for providing a crypto key and an 

H, associated checkword of said crypto key to an encryption 

L 4 device for a telemeter system of a missile, said apparatus 

Hi comprising: 

C5 a key loader having said crypto key and said associated 

<5 checkword stored therein; 

7 a microcontroller connected to said key loader to 

8 receive said crypto key and said associated 

9 checkword from said key loader, said 

10 microcontroller sending a first variable request 

11 signal to said key loader to effect a transfer of 

12 said crypto key and said associated checkword from 

13 said key loader to said microcontroller for 
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14 storage within said microcontroller; 

15 said microcontroller being connected to said encryption 

16 device, said microcontroller sending a sense in 

17 signal to said encryption device to initiate a 

18 load of said crypto key and said associated 

19 checkword into said encryption device; 

20 said microcontroller receiving from said encryption 

21 device a second variable request signal, said 
22| microcontroller, responsive to said second 

2gjj variable request, loading said crypto key and said 

2 J associated checkword into said encryption device; 

2|K said microcontroller being connected to a transmitter 
225L for the telemeter system of said missile, said 

2fF microcontroller providing a transmitter disable 

2& signal to said transmitter to disable said 

2§S transmitter when said crypto key and said 

30 associated checkword are loaded into said 

31 encryption device preventing said crypto key and 

32 said associated checkword from being transmitted 

33 by said transmitter; 

34 a first light emitting diode connected to said 

35 microcontroller, said first light emitting diode 

3 6 displaying a status for a load of said crypto key 

37 and said associated checkword into said encryption 
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38 device; 

39 said microcontroller being connected to a missile 

40 interface within said missile to receive a launch 

41 signal from said missile interface upon a launch 

42 of said missile, said microcontroller, responsive 

43 to said launch signal, erasing said crypto key and 

44 said associated checkword from said 

45 microcontroller ; 

4§ a second light emitting diode connected to said 

43 microcontroller, said second light emitting diode 

<f| displaying a status for an erase of said crypto 

^8 key and said associated checkword from said 

$0 microcontroller . 

14. The apparatus of claim 13 wherein said 

Q microcontroller comprises an 8-bit Microcontroller. 

1 15. The apparatus of claim 13 wherein said 

2 microcontroller includes an EEPROM for storing said crypto 

3 key and said associated checkword and a copy of said crypto 

4 key and said associated checkword. 

1 16. The apparatus of claim 13 wherein said 

2 microcontroller is connected to a loader interface within 



21 



Navy Case No. 82,100 



3 said missile to receive an erase signal from said loader 

4 interface, said microcontroller, responsive to said erase 

5 signal, erasing said crypto key and said associated 

6 checkword from said microcontroller. 
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ABSTRACT 

A Non-Volatile Memory circuit which functions as an 
interface between a key loader and an encryption device. 
Included in the Non-Volatile Memory circuit is a 
microcontroller which has an EEPROM adapted for storage of a 
5 crypto key and its corresponding checkword and also a backup 

crypto key and checkword. Connected to the microcontroller 
is a 4 MHz clock signal generator which supplies the master 
clock signal to the microcontroller. A pair of light 
ft emitting diodes are also connected to the micrcontroller to 

fib indicate the status of a load of the crypto key within the 

53 microcontroller as well as the status of an erase of the 

O crypto key from the microcontroller. The microcontroller is 

□ also connected to the telemeter transmitter for the missile. 

This allows the micrcontroller to turn off the transmitter 
j3> during a key load which prevents transmission of the crypto 

key and its corresponding checkword. When the 
microcontroller completes a load of the crypto key from its 
internal EEPROM to the encryption device and upon a launch 
of the missile, the software within the microcontroller 
20 erases the crypto key and its corresponding checkword from 

its EEPROM. This prevents an enemy force from retrieving 
the crypto key and its corresponding checkword from the 
missile after launch. 
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Appendix A 



Configuration Bits 



o 

m 
a 
m 



#def ine 
#def ine 
#cief ine 
#def ine 
#def ine 
#def ine 
#def ine 
#def ine 
#def ine 
#def ine 

#def ine 



CPJDN 
~CP_OFF 
_PWRTE_ON 

PWRTE_0FF 
~WDT_0N 

WDT_OFF 

"lp_osc 

JCTJDSC 
HS_0SC 
~RC OSC 



OxOOOF 
0x3FFF 
0x3FF7 
0x3FFF 
0x3FFF 
0x3FFB 
0x3FFC 
0x3FFD 
0x3 FFE 
0x3FFF 



mkstr(x) #x 



#i£$ef PIC_PROGRAMMER 

n /define CONFIG (x) 



asm( 1 



\tpsect config, class=CODE,delta=2" ) ; \ 
asm("\tglobal\tconfig_word" ) ; \ 
O asm( "conf ig_word" ) ; \ 

asm("\tdw " mkstr(x)) 

#e*^if /* End of PIC_PROGRAMMER */ 

#i|TSef DATAIO_PROGRAMMER /* Locate configuration at 0x0404 */ 

^ /define CONFIG(x) asm( ,f \tpsect dataio, class=CODE,delta=2" ) ; \ 

M; asm( "\tglobal\tconf ig_word" ) ; \ 

asm( "conf ig_word" ) ; \ 
J: asm ( " \tdw " mkst r ( x ) ) 

/e^if /* End of DATAIO PROGRAMMER */ 



/* end */ 

// psect eedata,delta=2,abs,ovrld 

// org 2100h 

// db 1,2,3,4,5 
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/************************************ ***^ 
Module Name: nvmem.c 
Number /Vers ion: 1.00 
History: 

Date Rev Author Description 

17-Dec-1998 1.00 C. Houlberg Baseline. 



Functions: 

initialize_system( ) 
eeprom_key_load ( ) 

kgv_key_load( ) 

erase_key ( ) 
wipe_key ( ) 
time delay ( ) 



Initializes processor. 

Loads key from key loader and stores it in 
EEPROM. 

Loads the key stored in the EEPROM into the 
KGV-68. 

Erases key following an erase indication. 

Wipe the key from EEPROM memory. 

Time delay (sets up interrupt routine). 



Abstract: 

This program performs all Non-Volital Memory control functions. 
The PIC16F873 or PIC16F876 is used as the Non-Volital Memory device. 
O The device signal definitions follow: 
Key Loader Data Interface Signals 



1) iS 




sense in 


Digital 


input 


1)0 




fill elk 


Digital 


input 


i)U1 




fill_data 


Digital 


input 


Dm 




var_req 


Digital 


output 


1) S 




erase 


Discrete input 




Key 


Loader Indicator 


Signals 




1)0 




kgvl_ok 


Digital 


output 






erase_ind 


Digital 


output 






kgv2 ok 


Digital 


output 




System Interface Signals 








flight erase 


Discrete input 






xmtr_dTsable 


Digital 


output 




KGV 


Interface Signal! 


s 




1)^ 




encr_sen_inl 


Digital 


output 


1)2 




encr fclk 


Digital 


output 


1)U 




encr_fdata 


Digital 


output 


1) 




encr_var_req 


Digital 


input 


1) 




encr_ran_cpl 


Digital 


input 






encr_sen_in2 


Digital 


output 






encr_mr 


Digital 


output 






encr_ck_okl 


Digital 


input 






encr_ck_ok2 


Digital 


input 






encr_ran_cp2 


Digital 


input 



Signal activating KGV-68 for 
keying 

Non-volatile memory key load clock 
Non-volatile memory key load data 
Strobe requesting key load 
Analog input 2.5 Volt threshold 

KGV1 key load accepted and OK 

Erased key indicator 

KGV2 key load accepted and OK 

Analog input 22.5 Volt threshold 
Transmitter disable signal 

Sense signal for KGV1 

KGV key loading clock (1.6KHz) 

KGV key loading data 

KGV key variable request 

KGV1 random compare OK (active 

low) 

Sense signal for KGV2 

KGV master reset 

KGV1 key check OK (active low) 

KGV2 key check OK (active low) 

KGV2 random compare OK (active 

low) 



Notes : 



1) Minimal set up I/O signals required to perform the non-volital 
memory function (single KGV-68). The non-volatile memory function 
can therefore be implemented with a PIC16F83 microcontroller. 

2) A PIC16F876 is used to perform the non-volital memory function for 
applications requiring two KGV-68s. All the above signals are 
used in this implementation. 

3) The processor is operated with a clock rate of 4MHz. All timer 
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operations must adjust prescaler and counter registers accordingly. 
4) All timer operations are implemented with an interrupt. Global 
variables are used to identify the timer function. 
********************************************* 

/* Conditional compilation. 



*/ 

// 



/* 
*/ 

// 



#def ine DUAL_KGV_SYSTEM 
#define MAX_KEYLOAD_AT TEMPTS 3 

Programmer being used. 



/* Two KG V- 68s to load */ 

/* Attempts for each key copy */ 



/* For the PIC programmer, no user defined memory section needed */ 
/define PIC_PROGRAMMER 

/* For the DatalO, the PICC command line must include -l-pdataio-0404h */ 
#def ine DATAIO_PROGRAMMER 

All parameters and functions used by main() are defined in 
the following header files. 



*/ 

#ifdef DUAL_KGV_SYSTEM 

O #include <picl6876.h> 
/else 

{Z /include <picl684.h> 
#en^if 

D /include "config.h" 
[p /include "nvmem.h" 
rf, /include "size.h" 



/* Single KGV system */ 

/* Processor definitions */ 

/* End of KGV system declaration */ 

/* pic configuration definitions */ 

/* Non-Volital Memory control definitions */ 

/* Sensitive data size information */ 



Configuration. 

CONFIG ( CP OFF & _PWRTE_ON & _WDT_OFF & _XT_OSC) 
Constant definitions, 
/define DE6LICH COUNT 3 



/* 
*/ 



Data storage locations. 

/define PRIMARY_CW_S TORAGE 
/define PRIMARY_KEY_STORAGE 
/define BACKUP_CWJ3TORAGE 
/define BACKUP_KEY_STORAGE 
/define TOT AL_KE Y_S TORAGE 

Enumerations . 

enum Activation 
{ 



/* Consecutive active signal 
samples */ 



0x00 

( PRIMARY_CW_S TORAGE + CHECK_WORD_SIZE) 
(PRIMARY_KEY_STORAGE + KEY_SIZE) 
(BACKUP_CW_STORAGE + CHECK_WORD_SIZE ) 
( (CHECK_WORD_SIZE + KEY_SIZE) « 1) 



OFF, 
ON 



}; 



enum Encrypter 
{ 

KGV1 , 
KGV2 



26 



Navy Case No. 82,100 



}; 

enum KeySource 
{ 

BACKUP, 
PRIMARY 

}; 

enum Interrupt Function 
{ 

START_KGV_KEY_LOAD , 
KGV_KEY_LOAD , 
ENDJCGV_KEY_LOAD , 
TIME_DELAY, 
FAST_FLASH, 
SLOW_FLASH 

}; 

/* Global interrupt enable */ 
Q #define GLOBAL_EKABLE 0x80 

fz /* (304 * 4 = 1,216 clock cycle half period => 1,645 Hz) */ 

y ^ /* Internal clock, low to high, prescale 1/16 */ 

D /define KGV_KEY_LOAD_OPTION 0x03 

m /* 1/19 (1/16 * 1/19 = 1/304) */ 

P~ #define KGV_KEY_LOAD_TMR0 (256 - 19) 

/* Internal clock, low to high, prescale 1/256 */ 
W /define TEN_MSEC_TIMER_OPT I ON 0x07 
O /* 1/39 (1/256 * 1/39 « 1/9,984) */ 
„ /define TENJ4SEC_TIMER_TMR0 (256 - 39) 

/* Fast flash is 10 flashes/second slow flash is 2 flashes/second */ 
y /define INDICATOR_FLASH_OPTION 0x07 
fU /define INDICATOR_FLASH_TMR0 (256 - 39) 

/define FAST_FLASH_COUNT 5 
Lj /define SLOW_FLASH_COUNT 25 

signal declarations. 

/define key_loader_present sense_in 

/define kgvl_not_loaded encr_ran_cpl 

/define kgv2_not_loaded encr_ran_cp2 

/define launch_active flight_erase 

/define erase_active erase 

/* Variable declarations, 
*/ 

/* Source of key for key load and KGV being loaded */ 

unsigned char key_source = PRIMARY; 

unsigned char key_destination == KGV1; 

/* Key load attempts */ 

unsigned char kgvl_load_attempt =0; 

unsigned char kgv2_load_attempt =0; 

unsigned char kgv_load_attempted =0; 

/* Storage for timer function interrupt */ 

unsigned char key_addr; 

unsigned char key_byte; 

unsigned char shift_counter; 

/* Interrupt function */ 
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unsigned char inter rupt_f unction; 
/* Global timer count down */ 
unsigned char timer_count; 
unsigned char fudge_count; 

/* Function definitions. 
*/ 

void initialize_system(unsigned char *key_present_ptr) ; 
void eeprom_key_load ( unsigned char *key__present_ptr ) ; 
unsigned char get_byte(void) ; 
void kgv_key_load ( void ) ; 
void interrupt handler (void) ; 

unsigned char read_eeprom( unsigned char address); 
void erase_key ( void) ; 
void wipe_key(void) ; 
void time_de lay (void) ; 

void check_eeprom( unsigned char *key_present_ptr ) ; 
^ void display_load_status(void) ; 

/* ******************************** ******************************* 
Function Name: main() 
Nuip^er /Vers ion : 
Hiffiory: 

y§ Date Rev Author Description 

CO 17-Dec-1998 1,00 C. Houlberg Baseline. 

Inp^t Variables: 
None . 

Output Variables: 
fy None . 

GloBal Variables: 
%l None . 

Functions Referenced: 

™ initialize_system( ) Initializes processor. 

eeprom_key_load ( ) Loads key from key loader and stores it in EE PROM. 
kgv_key_load ( ) Loads key into KGVs. Transmitters off during load. 

erase_key() Erases key following an erase indication. 

Abstract: Main program module to perform all Non-Volital Memory Control 
functions. 

******************************************************************************/ 

void main (void) 

{ 

/* Variable declarations */ 
unsigned char key_present; 

/* Initialize the system */ 
initialize_system( &key_present ) ; 

/* Key loading */ 

for(;;) 

{ 

/* Check if loader is preisent (returns when not present) */ 
if ( key_loaderj?resent ) 
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eeprom_key_load(&key_present) ; 

/* Check if key is present */ 

if { key_present ) 

{ 

/* Load the key into the KGVs */ 

if ( lkgv_load_attempted) /* Only if not previously 

attempted */ 

kgv_key_load( ) ; 

/* Check for erase indication to erase key */ 
if ( erase_active ) 

erase_key ( ) ; 



} 



/*********************************^ 
Function Name: initialize_system( ) 
Nuag>er / Vers ion : 
Higtory: 

Date Rev Author Description 

rf 17-Dec-1998 1.00 C. Houlberg Baseline. 

Infgit Variables: 

\j\ key_present_ptr Pointer to key_present flag. 

Output Variables: 
£ None. 

Global Variables: 
: ^ None . 

Frinbtions Referenced: 

Q time_delay() Wait for timer count to expire. 

^ eeprom_read ( ) Get byte from EE PROM - PIC library function. 

Abstract: Initializes system for all Non-Volital Memory Control functions. 
*************************^ 

void initialize_system(unsigned char *key_present_ptr ) 
{ 

/* Initialize port data direction */ 
TRISA = PORT_AJDIRECTION; 
TRISB = PORT_B_DIRECTION; 
#ifdef DUAL_KGV_S Y STEM 

TRISC = PORT C DIRECTION; 

#endif 

/* Initialize port output signal levels */ 

var_req =10; /* Active low (not requesting load) */ 

kgvl_ok =10; /* Active low (KGV1 not loaded) */ 

erase_ind =10; /* Active low (key not erased) */ 

xmtr_disable = 10; /* Active high (transmitter disabled) * 

encr_sen_inl =0; /* Active high (not loading KGV1) */ 

encr_fclk = 10; /* Active falling edge (initially high) */ 

encr_fdata = !0; /* Zero data bit */ 

#ifdef DUAL KGV SYSTEM 
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kgv2_ok = !0; 
encr_sen_in2 = 0; 
encrjmr = 0; 

#endif 

/* Initialize interrupts */ 
INTCON = GLOBAL_ENABLE; 

/* Test indicators */ 

kgvl_ok = 0; 

timer_count = 100; 

time_delay ( ) ; 

kgvl_ok - 10; 
#ifdef DUAL_KGV_S Y STEM 

kgv2_ok =0; 

timer_count = 100; 

time_delay ( ) ; 
_ kgv2_ok = 10; 
#efflif 

yp erase_ind =0; 
ip timer_count = 100; 
^ t ime_de 1 ay ( ) ; 
y erase ind = 10; 



/* Active low (KGV2 not loaded) */ 
/* Active high (not loading KGV2) */ 

/* Active high (not performing reset) */ 



/* Global enable, mask all interrupts */ 



/* Indicator on */ 

/* 1 second interval */ 

/* Delay for indicated count */ 

/* Indicator off */ 

/* Indicator on */ 

/* 1 second interval */ 

/* Delay for indicated count */ 

/* Indicator off */ 

/* Indicator on */ 

/* 1 second interval */ 

/* Delay for indicated count */ 
/* Indicator off */ 



/* Scan EE PROM for presence of key */ 
check_eeprom ( key_present_ptr ) ; 



j ********************************************* 
Function Name: eeprom_key_load( ) 
Nufeer /Version : 
Hi¥£ory: 
H Date 

%j 17-Dec-1998 1.00 



Rev 



Author 
C. Houlfoerg 



Baseline. 



Description 



Inp|t Variables: 

k=f key_present_ptr 

Output Variables: 
None. 



Pointer to key_present flag. 



Global Variables: 
None. 

Functions Referenced: 
time_delay ( ) 
get_byte ( ) 
eeprom_write( ) 



Wait for timer count to expire. 
Get byte from KYK-13 or KOI-18. 

Put byte in EE PROM - PIC library function. 



Abstract: Loads the check word and key from key loader (KYK-13 or KOI-18) 

and stores it in EE PROM. 
******************************************************** 

void eeprom_key_load (unsigned char *key present ptr) 
{ 

/* Variable declarations */ 

unsigned char byte_count, stable_count; 

unsigned char key_segment [16] ; /* Temporary storage for key segment */ 
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/* Disable the transmitters */ 
xmtr_disable = 10; 

/* Request load after an approximate 1 second delay */ 

kgvl_ok =10; /* Ensure indicator flash off */ 

#ifdef DUAL_KG V_S Y STEM 

kgv2_ok =10; /* Indicator off */ 

#endif 

timer_count - 10; /* 0.1 second interval */ 

time_delay( ) ; /* Delay for indicated count */ 

var_req = 0; /* Active low request */ 

/* Load Check Word */ 
for (byte_count = 0; 

(byte_count < CHECK_WORDJ3IZE) && key_loader_present ; byte_count++ ) 



{ 



/* Get one byte of fill data */ 
key_segment [ by te_count ] = get_byte ( ) ; 

/* Set request inactive (arbitrarily set done after 1st byte) */ 
var_req = !0; /* Active low request now not active */ 



/* Put Check Word segment into EE PROM */ 
for (byte_count =0; 

(byte_count < CHECK_WORD_SIZE ) && key_loader_present ; byte_count++ ) 

eeprom_write(PRIMARY_CW_STORAGE + byte_count, key_segment [ byte_count ] ) ; 
eeprom_write(BACKUP_CW_STORAGE + byte_count, key_segment [ byte_count ] ) ; 

/* Wait for indication that key is coming */ 

if ( key_loader_present ) 

{ 

/* Wait for disconnect (KYK-13) or fill clock (KOI-18) */ 
while ( key_loader_present && f ill__clk) ; 

/* Check for disconnect */ 

if ( ikey_loader_present) /* Loading with KYK-13 */ 
{ 

/* Wait for key loader present */ 

for (stable_count = 0; (stable_count < DEGLICH_COUNT) ; 
stable_count++ ) 

if ( !key_loader_present) stable_count =0; 

/* Set request inactive (arbitrarily set done after 1st byte) */ 
var_req =0; /* Active low request now active */ 

> 

/* Load Key */ 

for (byte_count = 0; 

(byte_count < KEY_SIZE) &<& key_loader_present ; byte_count++ ) 

/* Get one byte of fill data */ 
key_segment [ byte_count ] = get_byte ( ) ; 
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/* Set request inactive (arbitrarily set done after 1st byte) */ 
var_req = 10; /* Active low request now not active */ 

} 

/* Put Key segment into EEPROM */ 
for (byte_count « 0; 

(byte_count < KEY_SIZE) && key loader present; byte count ++) 
{ " 

eeprom_write(PRIMARY_KEY_STORAGE + byte_count, key__segment [ byte_count ] ) ; 

eeprom_write(BACKUP_KEY_STORAGE + byte_count, key_segment [byte__count ] ) ; 



/* Indicate key should be present (procedure completed) */ 

if ( key_loader_present ) 

{ 

*key_present__ptr = 10; 

/* Clear erase light */ 
erase_ind = 10; 

Q /* Wait for loader to be disconnected or turned off */ 

while ( key_loader_present ) ; 

JL: /* Indicate key load should be attempted */ 

%J kgv_load_attempted = 0; 

Hi kgvl_load_attempt = 0; 

#if^ef DUAL_KGV_SYSTEM 

kg v2_load_at tempt = 0; 

#eASif 
O } 
s else 

~r\ i 

^ /* Check EEPROM for old key */ 

I ^ check_eeprom ( key_present_ptr ) ; 

<j /* Display load status */ 

fZ = display_load_status ( ) ; 

/* Enable the transmitters */ 
xmtr_disable =0; 

} 

J************************************ ****************************************** 
Function Name: kgv_key_load( ) 
Number/ Version : 
History: 

Date Rev Author Description 

17-Dec-1998 1,00 C. Houlberg Baseline. 

Input Variables: 
None. 

Output Variables: 
None. 

Global Variables: 
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None* 

Functions Referenced: 
None, 

Abstract: Loads the key in EEPROM into the KGV-68s. The transmitters are 
disabled during the key load process. This function can be compiled 
for optimal operation with one or two KGV-68s. 

****************************************** 

void kgv_key_load(void) 
{ 

/* Disable the transmitters */ 
xmtr_disable = 10; 

/* Attempt key load until maximum attempts are exceeded */ 
do 

{ /* Check if KGV1 is not loaded */ 

if (kgvl_not_loaded) 

O { 

/* Set KGV1 sense input active to start load */ 
7Z encr_sen_inl = 10; 

O /* Wait for variable request from KGV1 */ 

Iff while (encr_var_req) ; /* Active low (wait for low) */ 

/* Attempt a key load */ 
^ /* Set up for start of key load interrupt */ 

O interrupt_f unction == START_KGV_KE Y_LOAD ; 

s key_destination ~ KGV1; 

t: /* Initialize timer and enable interrupt */ 

FU TMRO = KGV_KEY_LOAD TMRO; 

Ms OPTION = KGV_KEY_LOAD_OPTION; 

k.t INTCON = GLOBAL_ENABLE ; 

«; TOIE = 1; 

O /* Wait for key load to complete */ 

while (TOIE == 1) ; 

/* Set KGV1 sense input inactive */ 
encr_sen_inl =0; 

/* Count key load attempts */ 
++kgvl_load_attempt ; 

> 

#ifdef DUAL_KGV_SYSTEM 

/* Check if KGV2 is not loaded */ 

if ( kgv2_not_loaded ) 

{ 

/* Set KGV2 sense input active to start load */ 
encr_sen_in2 = 10; 

/* Wait for variable request from KGV2 */ 

while ( encr_var_req) ji /* Active low (wait for high) */ 

/* Attempt a key load */ 
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/* Set up for start of key load interrupt */ 
inter rupt_f unction = START JCGVJCEY_LOAD; 
key_destination = KGV2; 

/* Initialize timer and enable interrupt */ 
TMRO = KGV_KEY_LOAD_TMR0; 
OPTION = KGV_KEY_LOAD_OPTION; 
INTCON = GLOBAL_ENABLE; 
T0IE = 1; 

/* Wait for key load to complete */ 
while (T0IE == 1) ; 

/* Set KGV2 sense input inactive */ 
encr_sen_in2 =0; 

/* Count key load attempts */ 
++kgv2_load_at tempt; 

U } 
#e®if 

fff /* Next try other key source */ 

~4 key_source = !key_source; 

Mi /* Delay to allow the KGV-68 time to process segment */ 

£0 timer_count = 100; 

|jj time_delay ( ) ; 

i* Alternate between the primary key and the backup key */ 
s while ( ( kgvl_not_loaded 

O && (kgvl_load_attempt < (MAX_KEYLOAD_ATTEMPTS « 1))) 

#iffdef DUAL_KGV_SYSTEM 
12 I i (kgv2_not_loaded 

*~ && <kgv2_load_attempt < ( MAX_KEYLOAD_ATTEMPTS « 1))) 

#en&if 

O ); 

^ /* Enable the transmitters */ 
xmtr_disable = 0; 

/* Display indication if properly loaded */ 
display_load_status( ) ; 

/* Indicate KGV load attempted */ 
kgv_load_attempted = 10; 

} 

/******************************** 

Function Name: handler () 

Number /Vers ion : 

History: 

Date Rev Author Description 

17-Dec-1998 1*00 C. Houlberg Baseline* 

Input Variables: 
None. 

Output Variables: 
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None* 



Global Variables: 
None. 



Functions Referenced: 
eeprom_read ( ) 



Get byte from EE PROM - PIC library function. 



Abstract: Loads the key in EE PROM into the KGV-68. 



void interrupt handler (void) 
{ 

/* Variable declarations */ 
unsigned char temp; 

/* Clear TMRO flag */ 
TOIF = 0; 

/* Determine function of interrupt */ 
yp switch ( interrupt_f unction) 

m i 



case ( START_KGV_KEY_LOAD ) : 

/* Continue timer interrupt key load function */ 
TMRO = KGV_KE Y_LOAD_TMR0 ; 
OPTION = KGV_KEY_LOAD_OPTION; 
T0IE = 1; 

/* Initialize transfer variables */ 

encr_fclk = !0; /* Active falling edge */ 

if (key_source == PRIMARY) /* Point to start of primar 

key_addr = PRIMARY_CW_STORAGE ; 
else /* Point to start of backup key */ 

key_addr « BACKUP_CW_STORAGE ; 

key_byte = read_eeprom(key_addr++) ; /* Get first byte */ 



/* New interrupt function (continue key load on next interrupt) */ 
interrupt_f unction = KGV_KEY_LOAD ; 
break; 
case ( KG V_KE Y__L O AD ) : 

/* Continue timer interrupt key load function */ 
TMRO = KGV_KEY_LOAD_TMR0; 
OPTION = KGV_KEY_LOAD_OPTION; 
T0IE = 1; 

/* Transition clock */ 
temp = encr_fclk; 
encr_fclk = Itemp; 

/* Shift out new data bit on falling edge of encr_fclk */ 
if (encr_f elk) 




if(key_byte & 0x80) 

encr_fdata = 1; 

else 

encr_fdata = 0; 



* Output bit */ 

/* Shift for next bit transfer */ 

/* Indicate first bit output */ 



/* Determine state of MSB */ 
/* Output bit */ 



key__byte = key_byte « 1; 
shift_counter = 1; 
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{ 

/* Check if starting a new byte */ 
if { i shift_counter ) 

key_byte = read_eeprom(key_addr++) ; 

/* Check value of MSB and output to KGV */ 
if(key_byte & 0x80) 

encr_fdata = 1; 

else 

encr_fdata = 0; 

/* Shift data and updata shift counter modulo 8 */ 
key_byte = key_byte « 1; /* Shift for next bit 

transfer */ 
shift_counter = ++shift_counter & 0x07; 

} 

/* Check for new timer function */ 

if ( ( (key_addr == ( PRIMARY_CW_STORAGE + TOTAL_KEY_STORAGE ) ) 

j| (key_addr =*= { BACKUP_CW_STORAGE + TOTAL_KEY_STORAGE ) ) ) 
&& lshift_counter && !encr_fclk) 
interrupt_f unction = END_KGV_KEY_LOAD ; 

break; 
case (END_KGV_KEY_LOAD ) : 

/* Mask timer interrupt (key load function completed) */ 
T0IE = 0; 

/* Toggle clock high */ 
encr_fclk = !0; 
break; 
case ( TIME_DELAY ) : 

/* Reload TMR0 */ 

TMR0 = TE N_MS E C__T I MER_TMR0 ; 

OPTION = TEN_MSEC_TIMER_OPTION; 

if ( timer_count ) 

{ 

— timer_count ; 
T0IE = 1; 

} 

else 
{ 

T0IE = 0; 

} 

break; 
case ( FAST_FLASH ) : 
case(SLOW_FLASH) : 

/* Reload TMR0 */ 

TMR0 = INDICATOR_FLASH_TMR0; 

OPTION = INDICATOR_FLASH_OPTION; 

if ( t imer_count ) 

{ 

— timer_count ; 

} 

else 
{ 

/* Re-establish count */ 

if (interrupt^ function FAST_FLASH) 
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timer_count = FAST_FLASH_COUNT ; 

else 

timer_count = SLOW_FLASH_COUNT ; 
/* Toggle indicator */ 
temp = kgvl_ok; 
kgvl_ok = Iteitnp; 

#ifdef DUAL_KGV_SYSTEM 

temp = kgv2_ok; 
kgv2_ok = iteimp; 

#endif 

} 

TO IE = 1; 
break; 
default: 

break; 

} 

} 

Fuggpt ion Name : read_eepr om ( ) 

Number / Ver s ion : 

HijLiory: 

Date Rev Author Description 

U] 17-Dec-1998 1*00 C. Houlberg Baseline* 

Ing\it Variables: 

unsigned char address EE PROM data address location. 

Output Variables: 

g unsigned char read_eeprom ( ) Data from EEPROM . 

Gljcfcal Variables: 
l=~ None ♦ 

Functions Referenced: 
2; None . 

Abstract: EEPROM read routine ONLY for interrupt handler routine* 
**************************^ 

unsigned char read_eeprom( unsigned char address) 
{ 

EEADR = address; 
RD = 1; 

return EEDATA; 

} 

/************************^ 

Function Name: erase_key() 

Number /Version : 

History: 

Date Rev Author Description 

17-Dec-1998 1.00 C. Houlberg Baseline. 

Input Variables: 
None* 

Output Variables: 
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None. 

Global Variables: 
None. 

Functions Referenced: 

wipe_key() Perform a wipe operation to erase the key. 

Abstract: Erases the key stored in EE PROM following an erase indication 
from the key loader. 

************************************* *****************************************^ 

void erase__key (void) 

{ 

/* Variable declarations */ 
unsigned char stable_count; 
unsigned char delete_key = 10; 

_ /* Debounce the erase indication signal */ 

tj for(stable_count = 0; stable_count < DEGLICH_COUNT; stable_count++) 
yQ if ( !erase_active) delete_key =0; 

%1 /* If indicated, delete the key */ 
if ( delete_key ) 

in { 

Q] /* Wipe the key from EE PROM memory */ 

hi wipe__key ( ) ; 

^ /* Set erase light when key is erased */ 

s erase_ind =0; 

SI /* Maintain KGV-68 load status */ 

I ~ display_load_status ( ) ; 

H } 
} H 

**************** ****************************************** 

Function Name: wipe_key() 

Number /Version: 

History: 

Date Rev Author Description 

17-Dec-1998 1.00 C. Houlberg Baseline. 

Input Variables: 
None. 

Output Variables: 
None. 

Global Variables: 
None. 

Functions Referenced: 

eeprom_read ( ) Get byte from EE PROM - PIC library function. 

Abstract: Performs a "wipe" operation to erase the key stored in EE PROM. 

************************************* «4r*A*************************************^ 

void wipe_key (void) 
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{ 

/* Variable declarations */ 
unsigned char key_erased =0; 
unsigned char erase_pass; 
unsigned char byte_count; 

unsigned char data_byte[] = {Oxaa, 0x55, 0x46, Oxff, 0x00}; 

while ( ikey_erased) 
{ 

/* Erase EEPROM key storage memory (5 passes) */ 
for (erasejpass = 0; erase jpass < 5; erase_pass++) 
{ 

/* Perform one erasure pass */ 

for(byte_count = 0; byte_count < TOTAL_KEY_STORAGE ; byte_count++ ) 
eeprom_wr ite ( PRIMARY_CW_STORAGE + byte_count, 
data_byte[erase_pass] ) ; 

} 

«f /* Read EEPROM to verify erasure */ 

yO key_erased = !0; /* Assume key was erased */ 

In for(byte_count = 0; byte_count < TOTAL_KEY_STORAGE ; byte_count++ ) 

f4 if (eeprom_read(PRIMARY_CW_STORAGE + byte_count)) 

'i ? key_erased = 0; 

} 2 } 

******************************* **************************************** 
Function Name: time_delay() 
Number /Version : 
History : 

?n Date Rev Author Description 

j/T 17-Dec-1998 1.00 C. Houlberg Baseline, 

iriglit Variables: 
Q None . 

Output Variables: 
None. 

Global Variables: 
None. 

Functions Referenced: 
None. 

Abstract: Set up timer counter and waits until interrupts are completed. 
****************************************************************************** J 

void time_delay (void) 

{ 

interrupt_f unction = TIMEJDELAY;/* Set up interrupt */ 
TMR0 = TEN_MSECjriMER_TMR0; /* Initialize timer */ 

OPTION = TEN_MSEC_TIMER_OPTION; 

INTCON = GLOB ALIENABLE ; /* Ensure interrupts are enabled */ 

T0IE =1; /* Enable timer interrupt */ 

while{T0IE =» 1); /* Wait for delay to complete */ 

} 
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f************ ******** **************** ****************************************** 

Function Name: getJoyte() 

Number /Version : 

History: 

Date Rev Author Description 

17»Dec-1998 1.00 C. Houlberg Baseline. 

Input Variables: 
None . 

Output Variables: 

unsigned char byte 

Global Variables: 
None. 

Functions Referenced: 
f None . 

Ab&Sract: Gets a byte from the KYE-13 or KOI-18. 

**M**** ****************************** *****************************************/ 
unsigned char get_byte( void) 

{ m 

Z: /* Variable declarations */ 

yJ unsigned char bit_count, stable_count ; 

yj unsigned char data_byte; 

OT /* Get one byte of fill data (clocked in on falling edge) */ 
L. for (bit_count =0; 

O (bit_count < 8) && key_loader_present ; bit_count++) 

^7 /* Wait for clock to go low */ 

?, , for (stable_count = 0; 

( stable_count < DEGLICH_COUNT) && key_loader_present ; 
D stable_count++) 
H if(fill_clk) stable_count =0; 

/* Put data bit into data byte (MSB first) */ 
if ( key_loader_present ) 

data_byte = (data_byte « 1) + fill_data; 

/* Wait for clock to go high */ 
for (stable_count =0; 

(stable_count < DEGLICH_COUNT) && key_loader_present ; 

stable_count++ ) 

if ( If ill_clk) stable_count =0; 

} 

/* Return data byte */ 
return data__byte; 

} 

^ ***************************************************** ************************* 
Function Name: check_eeprom( ) 
Number / Ver s ion : 
History: 

Date Rev Author Description 
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17-Dec-1998 1.00 C. Houlberg Baseline. 

Input Variables: 

unsigned char *key_present_ptr 

Output Variables: 
None. 

Global Variables: 
None. 

Functions Referenced: 
None • 

Abstract: Scans EEPROM for possible presence of key. 
************************************** 

void check_eeprom( unsigned char *key_present_ptr ) 

{ & 

~=f /* variable declarations */ 

fl unsigned char i; 

fjl unsigned char no_data = !0; /* Assume no data in EEPROM */ 

^4 unsigned char bad_data = 0; /* Primary and backup data matches */ 

ff unsigned char stored_value; 

CO for(i = 0; i < BACKUP_CW_STORAGE ; i++) 

hi { 

j== stored_value = eeprom_read ( PRIMARY_CW_STORAGE + i) ; 

™ if ( stored_value && ( stored_value i= Oxff)) 

^ no_data = 0; /* Have data in EEPROM */ 

p if (stored_value != eeprom_read(BACKUP_CW STORAGE + i)) 

fy bad_data = 10; /* Mismatch => bad key data */ 

Li > 

if (no_data | j bad_data) 

M { 

p *key_present_ptr = 0; /* No good key data */ 

^ /* Flash kgv_ok to indicate the key is no good (10 flashes/sec) */ 

inter rupt_f unction = FAST_FLASH; /* Set up interrupt */ 
TMR0 = INDICATOR_FLASHJTMR0; /* Initialize timer */ 

OPTION « INDICATOR_FLASH_OPTION; 

timer_count = FAST_FLASH COUNT; /* 0.05 second interval */ 

T0IE =1; 

kgvl_ok =0; /* Indicator on */ 

#if def DUAL_KGV_SYSTEM 

kgv2_ok =0; /* Indicator on */ 

#endif 

} 

else 
{ 

/* Have a key */ 
*key_present_ptr = 10; 

} 

} 

/****************************************************************************** 
Function Name: display_load_status ( ) 
Number /Vers ion : 
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History: 

Date Rev Author Description 

17-Dec-1998 1*00 C. Houlfoerg Baseline. 

Input Variables: 
None. 

Output Variables: 
None. 

Global Variables: 
None. 

Functions Referenced: 
None. 

Abstract: Indicates if KGV-68 was properly loaded. 
*********************************************** 
vo£d display_load_status(void) 

in if { kgvl_not_loaded ) 

S { 

rf /* Flash kgv_ok to indicate the load is no good */ 

Ul inter rupt_f unction = SLOW_FLASH; /* Set up interrupt */ 

Ey timer_count = SLOW_FLASH_COUNT ; 

fj TMRO = INDICATOR_FLASH_TMR0; /* Initialize timer */ 

^ OPTION = I ND I CATOR_FLASH_OPT I ON ; 

^ INTCON = GLOBAL_ENABLE; /* Ensure interrupts are enabled */ 

s_ T0IE = 1; 

O kgvl_ok =0; /* Indicator on (toggle) */ 

else 

~H kgvl_ok =0; /* Properly loaded (indicator on) */ 

#i|&ef DUAL_KGV_SYSTEM 
^ i f ( kgv2_not_loaded ) 
{ 

/* Flash kgv_ok to indicate the load is no good */ 
interrupt_f unction = SLOWJFLASH; /* Set up interrupt */ 
timer_count = SLOW_FLASHjCOUNT ; 

TMRO = INDICATOR_FLASH_TMR0 ; /* Initialize timer */ 

OPTION = INDICATOR_FLASHjDPTION; 

INTCON = GLOBAL_ENABLE; /* Ensure interrupts are enabled */ 

T0IE = 1; 

kgv2_ok =0; /* indicator on (toggle) */ 

else 



} 

#endif 

} 

/* end */ 



kgv2_ok =0; /* Properly loader (indicator on) */ 
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/****************************************************************************** 

Module Name: nvmem.h 
Number /Vers ion : 1.00 
History: 

Date Rev Author Description 

17-Dec-1998 1.00 C. Houlberg Baseline. 



Abstract: 



Project definitions. 



******************************************************************************, 



/* 
*/ 



Constant definitions. 

/* Key Loader Data Interface Signals */ 
#define sense_in RAO /* 

#define fill_clk RA1 /* 

#define fill_data RA2 /* 

#define var_req RA3 /* 

#define erase RA4 /* 

/* Key Loader Indicator Signals */ 
/define kgvl_ok RB0 
#define erase_ind RBI 
#def ine kgv2_ok RC0 
/* System Interface Signals */ 
#define flight_erase RA5 
#define xmtr_di sable RB2 
/* KGV Interface Signals */ 
/define encr_sen_inl RB3 /* 
#define encr_fclk RB4 /* 

#define encr_fdata RB5 /* 

#define encr_var_req RB6 /* 
#define encr_ran_cpl RB7 /* 
#define encr_sen_in2 RC3 /* 
#define encrjnr RC4 /* 

#define encr_ck_okl RC5 /* 

#define encr_ck_ok2 RC6 /* 
#define encr_ran_cp2 RC7 /* 



Signal activating KGV-68 for keying */ 
Non-volatile memory key load clock */ 
Non-volatile memory key load data */ 
Strobe requesting key load */ 
Analog input 2.5 Volt threshold */ 



/* KGV1 key load accepted and OK */ 
/* Erased key indicator */ 
/* KGV2 key load accepted and OK */ 

/* Analog input 22.5 Volt threshold */ 

/* Transmitter disable signal */ 



Sense signal for KGV1 */ 
KGV key loading clock */ 
KGV key loading data */ 
KGV key variable request strobe */ 
KGV1 random compare OK (active low) 
Sense signal for KGV2 */ 
KGV master reset */ 
KGV1 key check OK (active low) */ 
KGV2 key check OK (active low) */ 
KGV2 random compare OK (active low) 



/* Port A and B data direction 

#ifdef DUAL_KGV_SYSTEM 

#define PORT_A_D IREGT ION 
#define PORT_B_DIRECTION 
#define PORT_C_DIRECTION 

#else /* Single KGV system */ 
/define PORT_A_DIRECTION 
/define PORT_B_DIRECTION 

#endif 



(1/0 => Input/Output) */ 

0x37 
OxcO 
0xe6 

0x17 
OxcO 



/* end */ 
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/* 

* 



* 
* 
* 
* 
* 
* 

*/ 



Header file for the Microchip 

PIC 16CR83 chip 

PIC 16F83 chip 

PIC 16C84 chip 

PIC 16F84 chip 

PIC 16CR84 chip 

Midrange Microcontrollers 



static 


volatile 


unsigned 


char 


RTCC 




@ 


0x01; 




static 


volatile 


unsigned 


char 


TMRO 




@ 


0x01; 




static 


volatile 


unsigned 


char 


PCL 




@ 


0x02; 




static 


volatile 


unsigned 


char 


STATUS 




@ 


0x03; 




static 




unsigned 


char 


FSR 




e 


0x04; 




static 


volatile 


unsigned 


char 


PORTA 




@ 


0x05; 




static 


volatile 


unsigned 


char 


PORTB 




@ 


0x06; 




static 


volatile 


unsigned 


char 


EEDATA 


@ 


0x08; 




stle|ic 


volatile 


unsigned 


char 


EEADR 




@ 


0x09; 




static 




unsigned 


char 


PCLATH 


@ 


OxOA; 




sti|ic 


volatile 


unsigned 


char 


INTCON 


e 


OxOB; 




stpjic 




unsigned 


char 


bankl 


OPTION 


e 


0x81; 


static 


volatile 


unsigned 


char 


bankl 


TRISA 




@ 


0x85; 


stliic 


volatile 


unsigned 


char 


bankl 


TRISB 




@ 


0x86; 


static 


volatile 


unsigned 


char 


bankl 


EECON1 


@ 


0x88; 


stptic 


volatile 


unsigned 


char 


bankl 


EECON2 


@ 


0x89; 



/*^ STATUS bits */ 

stfgbic volatile bit RP0 @ 

stf%fcic volatile bit TO @ 

static volatile bit PD @ 

static volatile bit ZERO @ 

stafeic volatile bit DC @ 

siSfcic volatile bit CARRY @ 



(unsigned) &STATUS*8+5 ; 
( uns igned ) &STATUS * 8+4 ; 
(unsigned) &STATUS*8+3; 
(unsigned) &STATUS*8+2; 
( unsigned ) &STATUS*8+1 ; 
( unsigned ) &STATUS*8+0 ; 





PORTA bits 


*/ 






static 


volatile 


bit 


RA4 


@ 


(unsigned ) &PORT A* 8+4 ; 


static 


volatile 


bit 


RA3 


@ 


(unsigned) &PORTA* 8+3 ; 


static 


volatile 


bit 


RA2 


@ 


( uns igned ) &PORTA* 8+2 ; 


static 


volatile 


bit 


RA1 


@ 


( uns igned ) &PORTA* 8+ 1 ; 


static 


volatile 


bit 


RAO 


@ 


( unsigned ) &PORTA*8+0 ; 


/* 


PORTB bits 


*/ 






static 


volatile 


bit 


RB7 


@ 


(unsigned) &PORTB*8+7 ; 


static 


volatile 


bit 


RB6 


@ 


( uns igned ) &PORTB* 8+ 6 ; 


static 


volatile 


bit 


RB5 


@ 


(unsigned) &PORTB*8+5 ; 


static 


volatile 


bit 


RB4 


e 


(unsigned) &PORTB* 8+4; 


static 


volatile 


bit 


RB3 


@ 


( unsigned) &PORTB* 8+3 ; 


static 


volatile 


bit 


RB2 


@ 


(unsigned) &PORTB*8+2 ; 


static 


volatile 


bit 


RBI 


@ 


(unsigned ) &PORTB*8+l ; 


static 


volatile 


bit 


RB0 


@ 


(unsigned) &PORTB* 8+0; 


static 


volatile 


bit 


INT 


@ 


(unsigned) &PORTB* 8+0 ; 



/* INTCON bits */ 
static volatile bit 
static volatile bit 



GIE @ (unsigned) &INTCON*8+7; 
EEIE @ (unsigned) &INTCON*8+6; 
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static volatile bit T0IE 

static volatile bit INTE 

static volatile bit RBIE 

static volatile bit TOIF 

static volatile bit INTF 

static volatile bit RBIF 



@ (unsigned) &INTCON*8+5; 
@ (unsigned) &INTCON*8+4; 
@ (unsigned) &INTCON*8+3; 
@ (unsigned) &INTCON*8+2; 
@ ( unsigned )&INTCON*8+l; 
@ ( unsigned )&INTCON* 8+0; 



/* OPTION 


bits 


*/ 






static 


bankl 


bit 


RBPU 


e 


( uns igned ) &OPTION* 8+7 ; 


static 


bankl 


bit 


INTEDG 


@ 


( uns igned ) &OPTION* 8+6 ; 


static 


bankl 


bit 


TOCS 


@ 


(unsigned) &OPTION*8+5; 


static 


bankl 


bit 


TOSE 


e 


(unsigned) &OPTION*8+4; 


static 


bankl 


bit 


PSA 


@ 


( uns igned ) &OPT ION * 8+ 3 ; 


static 


bankl 


bit 


PS2 


@ 


( uns igned ) &OPT ION* 8+2 ; 
(unsigned) &OPTION*8+l ; 


static 


bankl 


bit 


PS1 


@ 


static 


bankl 


bit 


PSO 


@ 


(unsigned) &OPTION*8+0; 



stktic 
stafcic 
stgtic 
stgf ic 
static 



TRISA bits */ 
volatile bankl bit 
volatile bankl bit 
volatile bankl bit 
volatile bankl bit 
volatile bankl bit 



/*W TRISB bits */ 
static volatile bankl bit 
static volatile bankl bit 
static volatile bankl bit 
static volatile bankl bit 
stSfcic volatile bankl bit 
static volatile bankl bit 
st|a[tic volatile bankl bit 
static volatile bankl bit 

/*p EECON1 bits */ 

s1|a|bic volatile bankl bit 

stlftic volatile bankl bit 

static volatile bankl bit 

static volatile bankl bit 

static volatile bankl bit 



TRISA4 @ ( unsigned )&TRISA* 8+4; 

TRISA3 @ (unsigned) &TRISA*8+3; 

TRISA2 @ (unsigned) &TRISA* 8+2; 

TRISA1 @ (unsigned) &TRISA*8+1; 

TRISAO @ (unsigned) &TRISA*8+0; 



TRISB7 
TRISB6 
TRISB5 
TRISB4 
TRISB3 
TRISB2 
TRISB1 
TRISBO 



@ (unsigned) 

@ (unsigned) 

@ (unsigned) 

@ (unsigned) 

@ (unsigned) 

@ (unsigned) 

@ (unsigned) 

@ (unsigned) 



&TRISB*8+7; 
&TRISB*8+6; 
&TRISB*8+5; 
&TRISB*8+4; 
&TRISB*8+3; 
&TRISB*8+2; 
&TRISB*8+1; 
&TRISB*8+0; 



EEIF @ (unsigned) &EECONl*8+4; 

WRERR <§ (unsigned) &EECONl*8+3; 

WREN @ (unsigned) &EECON1* 8+2; 

WR @ (unsigned) &EECONl*8+l; 

RD <§ (unsigned) &EECON1*8+0; 



/* macro versions of EEPROM write and read */ 
#define EEPROM_WRITE(addr, value) 

while(WR)continue;EEADR=(addr) ; EEDATA=( value ) ;GIE=0;WREN=1;\ 

EECON2=:0x55;EECON2=0xAA;WR=l;WREN=0 
#def ine EEPROM_READ ( addr ) ( ( EEADR= ( addr ) ) , (RD=1) ,EEDATA) 

/* library function versions */ 

extern void eepr om_wr it e (unsigned char addr, unsigned char value); 
extern unsigned char eeprom_read( uns igned char addr) ; 



#define CONFIG_ADDR 0x2007 
#define FOSC0 0x01 
#define FOSC1 0x02 
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/define WDTE 
/define PWRTE 

/* code protection */ 
#if defined (_16C84) 
#define CP 
#endif 



0x04 
0x08 



0x10 



/if defined <_16CR83) 
#define DP 
/define CP 
#endif 

#if defined (_16F83) 

/define CP 

/endif 

/define UNPROTECT CP 
/dlline PROTECT 



i i 
i i 



j defined (_16CR84 ) 
0x80 
0x3F70 



defined (_16F84) 
0x3FF0 



0x0000 
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